Event ID : 1 in windows Server 2012

1

Dear Team,

I’m having the query about Event ID : 1 ,

We are having the DC and this DC configured NTP service with asia.pool.ntp.org , some times getting this event The system time has changed to ‎2020‎-‎10‎-‎10T05:37:50.761128100Z from ‎2020‎-‎10‎-‎10T05:36:29.828443500Z.
Change Reason: An application or system component changed the time.

But actual time was 10/10/2020 11:07:50 AM .

The server BIOS time zone ‎2020‎-‎10‎-‎10T05:37:50.761128100Z ( +0:00 –Greenwich Mean Time ).
Windows Server time zone (UTC+05:30) Chennai, Kolkata, Mumbai, New Delhi .

My queries are given below,

  1. May i know the root cause of this event with above scenario ?

  2. If this condition what impact will happen for DC clients ?

  3. How to sync windows time with BIOS ?

  4. If BIOS & Windows times are differ what impact will happen ?

Requesting you to kindly share your input for above concern quires .

Regards,
Gobinath G

2
  1. It’s a normal log when your system try to modify time to sync with ntppool (or other ntp server)
  2. Client will sync with DC
  3. 11:07-05:37=05:30, so it’s already synced.
  4. Windows will use BIOS time when booting, when OS time is modified, Windows write modified time to BIOS.
3

Dear Team,

I have a query , for testing purpose we shutdown the internal NTP server , after a day each client showing with different times. May i know why it’s shows like that .

If time server communication dropped it should be continue with last synced time or it from take which source ?

4

How much time difference do the clients have to each other?

5

minimum 4 seconds , maximum 1 min.

6

When you shutdown your internal NTP sever, the clients has no time source any more. So their clocks are free running, that explains the time drift.

7

okay , noted … And i have following three queries , kindly guide me .

  1. is can not control the clock free running , while NTP server down ?

  2. How to monitoring the NTP server which is pointed to internet ?

  3. How to monitoring the NTP server which is pointed to intranet ?